Related skills
linux windows python go macos📋 Description
- Architect and improve detection and investigation capabilities using integrated technologies.
- Improve detection strategy with new detections for Expel's rule engine.
- Maintain docs for detection and response content.
- Automate investigative workflows to boost SOC efficiency with Python.
- Collaborate with Engineering on integrations and standards.
- Lead research on threat landscape and automation development.
🎯 Requirements
- 3+ years with detection/response tools (EDR, NSM, SIEM)
- 3+ years writing, deploying, tuning detections (Windows logs, auditd, CloudTrail)
- Proficient in Python or Go (OO languages)
- Strong knowledge of Windows, macOS, Linux and CLI
- Networking basics: TCP/IP and OSI
- Expert knowledge of attack vectors and attacker techniques
- Intermediate knowledge of cloud platforms and IAM
- Bachelor's degree preferred
🎁 Benefits
- Unlimited PTO and health benefits
- Work location flexibility
- Up to 24 weeks parental leave
- Transparent salary and equity
- Equal opportunity employer
- Reasonable accommodations for disabilities
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Engineering Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!